CVE-2018-13796

Moderate severity vulnerability that affects mailman

6.5 MediumFix available

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

2.53%Up 1.2 points since Apr 14, 2021

What each source reports

NVD Score used 6.5

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: CVE-2018-13796
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: CVE-2018-13796
Updated: 2026-11-02

EUVDEUVD-2018-0472 No score

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: EUVD-2018-0472
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xqvg-xm9m-p2c4 6.5

Moderate severity vulnerability that affects mailman

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: GHSA-xqvg-xm9m-p2c4
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness: CWE-20
Updated: 2026-11-02

OSVGHSA-xqvg-xm9m-p2c4 6.5

Moderate severity vulnerability that affects mailman

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: GHSA-xqvg-xm9m-p2c4
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness: CWE-20
Updated: 2026-11-02

OSVPYSEC-2026-661 6.5

Moderate severity vulnerability that affects mailman

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: PYSEC-2026-661
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated: 2026-11-02

Show 6 moreShow less

OSVRHSA-2020:1054 4.8

Red Hat Security Advisory: mailman security and bug fix update

Record: RHSA-2020:1054
CVSS 3.0: 4.8 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-13796 6.5

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Record: UBUNTU-CVE-2018-13796
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVMGASA-2018-0383 No score

Updated mailman packages fix security vulnerability

Updated mailman package fixes security vulnerability:

It was discovered that mailman prior to 2.1.29 mishandled URLs in Utils.py:GetPathPieces() which allowed attackers to display arbitrary text on trusted sites (CVE-2018-13796).

Record: MGASA-2018-0383
Updated: 2026-11-02

OSVSUSE-SU-2018:4296-1 No score

Security update for mailman

This update for mailman fixes the following security vulnerabilities:

Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)

Record: SUSE-SU-2018:4296-1
Updated: 2026-11-02

OSVSUSE-SU-2019:13924-1 No score

Security update for mailman

This update for mailman fixes the following issues:

Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)

Record: SUSE-SU-2019:13924-1
Updated: 2026-11-02

OSVUSN-4348-1 No score

mailman vulnerabilities

It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this to issue execute arbitrary scripts or HTML. (CVE-2018-0618)

It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to display arbitrary text on a web page. (CVE-2018-13796)

It was discovered that Mailman incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-12137)

Record: USN-4348-1
Updated: 2026-11-02

Affected products

gnu mailman

Affected packages

Affected packages
Package	Affected	Fixed
`mailman` PyPI	before 2.1.28	2.1.28
`mailman` Debian:8 From an advisory covering 2 CVEs	before 1:2.1.18-2+deb8u3, plus listed versions 1:2.1.18-21:2.1.18-2+deb8u11:2.1.18-2+deb8u2	1:2.1.18-2+deb8u3
`mailman` PyPI	before 2.1.28, plus listed versions 3.0.0b3-	2.1.28
`mailman` Mageia:6	before 2.1.29-1.mga6	2.1.29-1.mga6
`mailman` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 3:2.1.15-30.el7	3:2.1.15-30.el7
`mailman-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 3:2.1.15-30.el7	3:2.1.15-30.el7
`mailman` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 3:2.1.15-30.el7	3:2.1.15-30.el7
`mailman-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 3:2.1.15-30.el7	3:2.1.15-30.el7
`mailman` SUSE:OpenStack Cloud 7 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3

Show 19 moreShow less

Affected packages
Package	Affected	Fixed
`mailman` SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12-LTSS From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server 12 SP4 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Enterprise Storage 4 From an advisory covering 5 CVEs	before 2.1.17-3.3.3	2.1.17-3.3.3
`mailman` SUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 5 CVEs	before 2.1.15-9.6.6.1	2.1.15-9.6.6.1
`mailman` SUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 5 CVEs	before 2.1.15-9.6.6.1	2.1.15-9.6.6.1
`mailman` SUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 5 CVEs	before 2.1.15-9.6.6.1	2.1.15-9.6.6.1
`mailman` SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 5 CVEs	before 2.1.15-9.6.6.1	2.1.15-9.6.6.1
`mailman` SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 5 CVEs	before 2.1.15-9.6.6.1	2.1.15-9.6.6.1
`mailman` Ubuntu:16.04:LTS	before 1:2.1.20-1ubuntu0.4, plus listed versions 1:2.1.20-11:2.1.20-1ubuntu0.11:2.1.20-1ubuntu0.3	1:2.1.20-1ubuntu0.4
`mailman` Ubuntu:18.04:LTS	before 1:2.1.26-1ubuntu0.1, plus listed versions 1:2.1.23-11:2.1.24-11:2.1.25-11:2.1.26-1	1:2.1.26-1ubuntu0.1
`mailman` Ubuntu:16.04:LTS From an advisory covering 3 CVEs	before 1:2.1.20-1ubuntu0.4, plus listed versions 1:2.1.20-11:2.1.20-1ubuntu0.11:2.1.20-1ubuntu0.3	1:2.1.20-1ubuntu0.4
`mailman` Ubuntu:18.04:LTS From an advisory covering 3 CVEs	before 1:2.1.26-1ubuntu0.1, plus listed versions 1:2.1.23-11:2.1.24-11:2.1.25-11:2.1.26-1	1:2.1.26-1ubuntu0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-13796 is a medium vulnerability (CVSS 6.5) in Gnu Mailman, published July 12, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 84th percentile. Fixed in mailman 2.1.28.

References

Show 34 moreShow less